$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7f1f3909-934d-32ab-bd49-5209ad0fade0.roa File: 7f1f3909-934d-32ab-bd49-5209ad0fade0.roa (raw, json) Hash identifier: iCu0Lp28CicyKssUK51v9FLpI0DMzcuE6US/eV6iF2Y= Subject key identifier: 5C:82:17:4F:67:9A:59:0A:BD:E5:BF:07:AE:1B:B5:0E:49:29:CB:50 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584A41105918D063362C149FF780 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7f1f3909-934d-32ab-bd49-5209ad0fade0.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 271 IP address blocks: 209.87.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:59:18:d0:63:36:2c:14:9f:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=22deee9d-7384-4865-b44a-94f620cf2d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:df:bb:92:57:af:1f:c0:da:28:3d:94:37: 31:24:7a:4b:40:54:8b:04:c0:3f:c5:e8:34:03:d8: 0c:d9:ec:1d:66:35:d5:6f:d8:c2:56:c8:7b:e1:f8: a0:89:2b:64:91:1d:c2:75:43:b9:9c:ff:09:a0:89: 02:f8:d6:b7:32:ac:01:c5:3c:9d:6f:61:c9:07:f1: ad:98:05:e7:0f:f7:57:c8:3d:69:53:54:e6:d7:78: 43:db:c1:8d:e9:1d:ab:91:bd:68:79:0a:a1:ab:86: 5e:28:e6:bd:24:f0:b5:8f:b3:41:6b:58:ea:97:57: 22:61:eb:2e:14:b8:26:46:e3:16:42:3f:15:07:f6: d5:cf:04:c3:85:31:9b:fc:ec:c6:3a:38:50:91:09: 6e:a8:c1:f6:b5:e1:7c:68:da:f3:5d:d4:fe:88:14: 51:e3:74:05:6d:0d:56:e5:3f:ea:d3:3a:77:49:91: 93:3b:27:15:fb:20:3f:fc:b2:67:21:c7:4e:f1:a4: 3c:4b:97:09:41:33:c3:29:11:a8:4c:d5:95:8f:ac: 31:67:51:ad:5f:30:dc:1e:1f:f7:02:eb:36:3e:4a: 2f:e9:7d:ad:35:d3:d2:e8:42:28:cb:2c:7b:13:2c: 8e:ad:3f:05:d7:4d:98:ee:f3:e4:b2:6c:24:aa:fd: 30:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:82:17:4F:67:9A:59:0A:BD:E5:BF:07:AE:1B:B5:0E:49:29:CB:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7f1f3909-934d-32ab-bd49-5209ad0fade0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:df:be:9e:f0:d8:11:03:5d:e8:5e:33:01:9d:4b:48:6d:5d: 74:53:b5:64:b0:15:ab:f9:39:5b:75:e8:d3:e5:49:05:72:58: 4d:73:5b:7b:4f:74:06:4b:6c:0f:34:e0:29:5f:00:09:ae:b3: a6:a9:b5:3b:17:d6:7d:68:e8:cc:cd:9a:94:15:1b:3d:f9:fd: 10:2e:06:1e:44:df:6c:a8:a7:49:b3:3c:4c:3d:a3:e8:20:1d: ae:33:6a:d5:bf:61:70:c4:80:9a:97:b2:58:6c:b3:8d:bb:0b: 08:7b:d0:95:2b:0d:be:8c:db:27:91:02:42:d3:99:ca:13:69: dc:b7:0f:64:c1:ec:3b:ab:6e:7e:64:ec:1d:29:28:92:fa:cf: b6:af:78:35:0a:40:65:92:a5:34:05:85:e6:e6:af:ec:ea:8d: ba:e1:04:6c:cf:01:a2:0d:89:73:b3:41:f0:ee:41:23:ca:83: 3c:09:f8:4a:bc:d3:df:15:78:4c:a6:b4:4d:31:b7:da:1c:08: e3:e1:20:98:16:c5:7b:69:12:52:5a:bc:07:26:6f:cc:f2:c1: b8:3c:4e:98:df:70:d9:56:1b:08:b3:86:d6:c3:28:f6:1f:69: 24:75:3b:c9:03:6c:3f:18:08:12:92:d9:ee:bb:f4:17:bf:cb: 7b:f6:e5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFkY0GM2LBSf94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MjJkZWVlOWQtNzM4NC00ODY1LWI0NGEtOTRmNjIwY2YyZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlPfu5JXrx/A2ig9lDcxJHpLQFSLBMA/xeg0 A9gM2ewdZjXVb9jCVsh74figiStkkR3CdUO5nP8JoIkC+Na3MqwBxTydb2HJB/Gt mAXnD/dXyD1pU1Tm13hD28GN6R2rkb1oeQqhq4ZeKOa9JPC1j7NBa1jql1ciYesu FLgmRuMWQj8VB/bVzwTDhTGb/OzGOjhQkQluqMH2teF8aNrzXdT+iBRR43QFbQ1W 5T/q0zp3SZGTOycV+yA//LJnIcdO8aQ8S5cJQTPDKRGoTNWVj6wxZ1GtXzDcHh/3 Aus2Pkov6X2tNdPS6EIoyyx7EyyOrT8F102Y7vPksmwkqv0wDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyCF09nmlkKveW/B64btQ5JKctQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2YxZjM5MDktOTM0ZC0z MmFiLWJkNDktNTIwOWFkMGZhZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHfvp7w2BEDXeheMwGdS0htXXRTtWSwFav5OVt16NPlSQVyWE1zW3tP dAZLbA804ClfAAmus6aptTsX1n1o6MzNmpQVGz35/RAuBh5E32yop0mzPEw9o+gg Ha4zatW/YXDEgJqXslhss427Cwh70JUrDb6M2yeRAkLTmcoTady3D2TB7Durbn5k 7B0pKJL6z7aveDUKQGWSpTQFhebmr+zqjbrhBGzPAaINiXOzQfDuQSPKgzwJ+Eq8 098VeEymtE0xt9ocCOPhIJgWxXtpElJavAcmb8zywbg8TpjfcNlWGwizhtbDKPYf aSR1O8kDbD8YCBKS2e679Be/y3v25XE= -----END CERTIFICATE-----Generated at Sun Jun 29 21:44:31 2025 by rpki-client